Selefra is an open-source cloud governance tool to analyze multi-cloud assets for security, compliance, and policy enforcement.

• Detect-to-Remediate: discover and remediate unnoticed risky problems in one stop.
• Provider Agnostic: reduce switching cost between isolated control planes.
• Ease-of-Use: simplified usage to write and maintain for quick fixes and long-term usage.

With rules written in YAML and SQL, Selefra automatically pulls data from providers including AWS, GCP, Azure, and more.

For example, a rule to check if AWS S3 bucket is misconfigured:

selefra:
  name: selefra-demo
  cli_version: ">=0.0.1"
  providers:
    - name: aws
      source: 'selefra/aws'
      version: "latest"
  connection:
    type: postgres
    username: postgres
    password: pass
    host: localhost
    port: 5432
    database: postgres
    sslmode: disable

providers:
  - name: aws
    regions:
      - us-east-1
      
rules:
  - name: Disabled_MFA
    query: select * from aws_iam_users where user_name = '<root_account>' and mfa_active = 'f'
    labels:
      severity: Critical
    metadata:
      title: "MFA is disabled for root user"
      description: "MFA is disabled for root user"
    output: "AWS user has disabled MFA, username: {{.user_name}}"

For detailed instructions on prerequisites, check Get Started for more info.

Otherwise, run a demo through the following steps, it should take less than a few miniutes:

download packages to install Selefra.

If you are MacOS user, tap Selefra with Homebrew.

brew tap selefra/tap

Now, install Selefra

brew install selefra/tap/selefra

selefra init selefra-demo && cd selefra-demo

selefra apply 

See Docs for best practices and detailed instructions. In docs, you will find info on installation, CLI usage, project workflow and more guides on how to accomplish cloud inspection tasks.

Selefra is a community-driven project, we welcome you to open a GitHub Issue to report a bug, suggest an improvement, or request new feature.

• Join Selefra Community on Slack. We host Community Hour for tutorials and Q&As on regular basis.
• Follow us on Twitter and share your thoughts！

For developers interested in building Selefra codebase, read through Contributing.md and Selefra Roadmap. Let us know what you would like to work on!

Mozilla Public License v2.0